Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2015 02 Ran by Alec (administrator) on ALEC-PC on 17-05-2015 22:33:21 Running from C:\Users\Alec\Desktop Loaded Profiles: Alec (Available profiles: Alec) Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Autodesk Inc.) C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe (Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe (Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe (Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe () C:\Windows\System32\spool\drivers\x64\3\dldoserv.exe ( ) C:\Windows\System32\dldocoms.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\mcsacore.exe (McAfee, Inc.) C:\Windows\System32\mfevtps.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\ProgramData\boostwebapp\1.1.0.31\xelajuf.EXE () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\runSW.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe (Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe (DEVGURU Co., LTD.) C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe () C:\ProgramData\boostwebapp\1.1.0.31\OthkoDaeht.exe () C:\ProgramData\boostwebapp\1.1.0.31\xelwjuf.EXE (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE () C:\Program Files (x86)\Realtek\REALTEK USB Wireless LAN Driver\WPSService20.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Cambridge Silicon Radio Limited) C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe (McAfee, Inc.) C:\Program Files\McAfee\MSC\McAPExe.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\SystemCore\mfefire.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE () C:\ProgramData\boostwebapp\1.1.0.31\Neltyjcoa.EXE (McAfee, Inc.) C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe () C:\Users\Alec\AppData\Local\ospd_us_1069\upospd_us_1069.exe (Realtek) C:\Windows\SwUSB.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (BitTorrent Inc.) C:\Users\Alec\AppData\Roaming\uTorrent\uTorrent.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\McChHost.exe (McAfee, Inc.) C:\Program Files (x86)\McAfee\SiteAdvisor\saUI.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\ProgramData\NetEngine\bin\D10\netengine.exe () C:\ProgramData\NetEngine\bin\D10\netengine.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (McAfee, Inc.) C:\Program Files\Common Files\McAfee\Platform\McUICnt.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe () C:\ProgramData\boostwebapp\1.1.0.31\xeldjuf.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7573208 2014-04-22] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2673296 2015-03-27] (NVIDIA Corporation) HKLM\...\Run: [3D BubbleSound] => "C:\Program Files\BubbleSound\3D BubbleSound.exe" HKLM-x32\...\RunOnce: [upospd_us_1069.exe] => C:\Users\Alec\AppData\Local\ospd_us_1069\upospd_us_1069.exe [3285960 2015-05-15] () HKLM-x32\...\RunOnce: [SpUninstallCleanUp] => REG delete HKEY_LOCAL_MACHINE\Software\SearchProtect /f HKLM\...\Policies\Explorer: [NoFolderOptions] 0 HKLM\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8204056 2015-04-23] (Piriform Ltd) HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\Run: [DesktopSearch] => C:\ProgramData\DesktopSearch\DesktopSearch.exe -ros HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_17_0_0_169_ActiveX.exe [927920 2015-04-15] (Adobe Systems Incorporated) HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\Policies\Explorer: [NoFolderOptions] 0 HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\Policies\Explorer: [NoControlPanel] 0 HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: F - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {8f15e18a-dd64-11e4-a41c-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {8f15e1a8-dd64-11e4-a41c-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {bd88f3b4-b54b-11e4-83d2-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {bd88f3bc-b54b-11e4-83d2-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {bd88f3de-b54b-11e4-83d2-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {bd88f3e4-b54b-11e4-83d2-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {e5d2a948-86d2-11e4-86fa-806e6f6e6963} - D:\autorun.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\MountPoints2: {fac26674-b32a-11e4-9bcb-6805ca2ceaa7} - F:\VZW_Software_upgrade_assistant.exe HKU\S-1-5-21-88998690-3935351832-2280324733-1001\...\Winlogon: [Shell] explorer.exe <==== ATTENTION Startup: C:\Users\Alec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\hqghumeaylnlf.lnk [2015-05-16] ShortcutTarget: hqghumeaylnlf.lnk -> C:\ProgramData\{b8665b58-716b-4f37-b866-65b587166d61}\hqghumeaylnlf.exe (No File) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKU\S-1-5-21-88998690-3935351832-2280324733-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-88998690-3935351832-2280324733-1001 -> {015DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://www.trovi.com/Results.aspx?gd=&ctid=CT3325157&octid=EB_ORIGINAL_CTID&ISID=M82BB47B7-50E0-492B-8A7C-2E123F9E675E&SearchSource=58&CUI=&UM=8&UP=SPE0D03606-05B1-46C4-AE0C-AFA6B63D1290&D=051815&q={searchTerms}&SSPV=SP22330TB_sp_ie BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-29] (Microsoft Corp.) BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.) BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-01-24] (Oracle Corporation) BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2011-03-28] (Microsoft Corp.) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-01-24] (Oracle Corporation) Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-04-17] (McAfee, Inc.) Handler-x32: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-04-17] (McAfee, Inc.) Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\x64\McIEPlg.dll [2015-04-17] (McAfee, Inc.) Handler-x32: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files (x86)\McAfee\SiteAdvisor\McIEPlg.dll [2015-04-17] (McAfee, Inc.) Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2011-01-19] (Skype Technologies) Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files\McAfee\MSC\McSnIePl64.dll [2015-02-27] (McAfee, Inc.) Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - c:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2015-02-27] (McAfee, Inc.) Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2014-09-03] (Citrix Systems, Inc.) Tcpip\Parameters: [DhcpNameServer] 192.168.254.254 FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-15] () FF Plugin: @mcafee.com/MSC,version=10 -> c:\PROGRA~1\mcafee\msc\NPMCSN~1.DLL [2015-02-27] () FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] () FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.) FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2014-09-03] (Citrix Systems, Inc.) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-01-24] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-01-24] (Oracle Corporation) FF Plugin-x32: @mcafee.com/MSC,version=10 -> c:\PROGRA~2\mcafee\msc\NPMCSN~1.DLL [2015-02-27] () FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~4\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3502.0922 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=15.4.3538.0513 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2011-05-13] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-15] (Google Inc.) FF Plugin HKU\S-1-5-21-88998690-3935351832-2280324733-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Alec\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-03-27] (Unity Technologies ApS) FF HKLM\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor FF Extension: McAfee SiteAdvisor - C:\Program Files (x86)\McAfee\SiteAdvisor [2014-12-28] FF HKLM-x32\...\Firefox\Extensions: [{4ED1F68A-5463-4931-9384-8FFF5ED91D92}] - C:\Program Files (x86)\McAfee\SiteAdvisor Chrome: ======= CHR HomePage: Default -> CHR StartupUrls: Default -> "https://www.google.com/", "hxxp://fs-uk.com/" CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter} CHR Profile: C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Cloud SWF, Flash Player with Drive) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffhhaadihgfcgmlefioblaahpnglnkbk [2015-05-16] CHR Extension: (SiteAdvisor) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2015-04-25] CHR Extension: (AdBlock) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-05-16] CHR Extension: (Bookmark Manager) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-16] CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-12] CHR Extension: (Google Wallet) - C:\Users\Alec\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-12-25] CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-05-08] CHR HKLM-x32\...\Chrome\Extension: [dogdoihocdkadpalbghcpfafbojcfofa] - https://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho] - C:\Program Files (x86)\McAfee\SiteAdvisor\McChPlg.crx [2015-05-08] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) Locked "tammgF119" service could not be unlocked. <===== ATTENTION Locked "tammgR119" service could not be unlocked. <===== ATTENTION R2 AdAppMgrSvc; C:\Program Files (x86)\Common Files\Autodesk Shared\AppManager\R1\AdAppMgrSvc.exe [599944 2014-12-04] (Autodesk Inc.) R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] () R2 BtSwitcherService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\BtSwitcherService.exe [64216 2012-03-22] (Cambridge Silicon Radio Limited) R2 CSRBtAudioService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtAudioService.exe [465624 2012-03-22] (Cambridge Silicon Radio Limited) R2 CsrBtOBEXService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtOBEXService.exe [1041616 2012-03-22] (Cambridge Silicon Radio Limited) R2 CsrBtService; C:\Program Files\CSR\CSR Harmony Wireless Software Stack\CsrBtService.exe [825032 2012-03-22] (Cambridge Silicon Radio Limited) R2 DiagTrack; C:\Windows\system32\diagtrack.dll [1254400 2015-04-27] (Microsoft Corporation) R2 dldoCATSCustConnectService; C:\Windows\system32\spool\DRIVERS\x64\3\\dldoserv.exe [34032 2007-10-05] () R2 dldo_device; C:\Windows\system32\dldocoms.exe [1044720 2007-10-05] ( ) R2 dldo_device; C:\Windows\SysWOW64\dldocoms.exe [595184 2007-10-05] ( ) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152144 2015-03-27] (NVIDIA Corporation) R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McAfee SiteAdvisor Service; C:\Program Files (x86)\McAfee\SiteAdvisor\McSACore.exe [154856 2015-04-17] (McAfee, Inc.) R2 McAPExe; C:\Program Files\McAfee\MSC\McAPExe.exe [562200 2015-02-27] (McAfee, Inc.) S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.) R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\1.3.374.0\McCSPServiceHost.exe [422632 2015-01-22] (McAfee, Inc.) R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McNaiAnn; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) S3 McODS; C:\Program Files\McAfee\VirusScan\mcods.exe [601864 2015-02-27] (McAfee, Inc.) R2 mcpltsvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 McProxy; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [335064 2014-10-31] (McAfee, Inc.) R2 mfecore; C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe [1050952 2014-11-06] (McAfee, Inc.) R2 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [221832 2014-10-01] (McAfee, Inc.) R2 mfevtp; C:\Windows\system32\mfevtps.exe [189920 2014-10-01] (McAfee, Inc.) S3 mi-raysat_3dsmax2015_64; C:\Program Files\Autodesk\3ds Max 2015\NVIDIA\Satellite\raysat_3dsmax2015_64server.exe [86016 2011-09-14] () [File not signed] S4 MSMQ; C:\Windows\system32\mqsvc.exe [9216 2009-07-13] (Microsoft Corporation) R2 MSSQL$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [57617752 2009-03-30] (Microsoft Corporation) R3 Neltyjcoa; C:\ProgramData\boostwebapp\1.1.0.31\Neltyjcoa.exe [0 ] () <==== ATTENTION (zero size file/folder) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1878672 2015-03-27] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22995600 2015-03-27] (NVIDIA Corporation) R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75136 2014-12-31] () R2 RunSwUSB; C:\Windows\runSW.exe [44104 2014-01-16] () S4 SQLAgent$SQLEXPRESS; c:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [427880 2009-03-30] (Microsoft Corporation) R2 ss_conn_service; C:\Program Files\SAMSUNG\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-12-02] (DEVGURU Co., LTD.) S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [762320 2014-11-04] (Tunngle.net GmbH) R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [44856 2015-02-25] (AVG Technologies) R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [36664 2015-02-25] (AVG Technologies) S4 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [453120 2010-11-20] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) R2 WPSService20; C:\Program Files (x86)\Realtek\REALTEK USB Wireless LAN Driver\WPSService20.exe [96768 2013-05-07] () [File not signed] R2 pikeiisy; "C:\ProgramData\boostwebapp\1.1.0.31\xelajuf.exe" /ts2=1 [X] R2 TordukTiud; "C:\ProgramData\boostwebapp\1.1.0.31\OthkoDaeht.exe" -cmd [X] R2 volbukirog; "C:\ProgramData\boostwebapp\1.1.0.31\xelwjuf.exe" -cms [X] ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.) R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] () R3 cfwids; C:\Windows\System32\drivers\cfwids.sys [72136 2014-10-01] (McAfee, Inc.) S3 cpuz138; No ImagePath S3 csravrcp; C:\Windows\System32\DRIVERS\csravrcp.sys [26304 2012-03-22] (Cambridge Silicon Radio Limited) S3 CsrBtPort; C:\Windows\System32\DRIVERS\CsrBtPort.sys [2784968 2012-03-22] (Cambridge Silicon Radio Limited) S3 csrhidmini; C:\Windows\System32\DRIVERS\csrhidmini.sys [29896 2012-03-22] (Cambridge Silicon Radio Limited) S3 csrpan; C:\Windows\System32\DRIVERS\csrpan.sys [39616 2012-03-22] (Cambridge Silicon Radio Limited) S3 csrserial; C:\Windows\System32\DRIVERS\csrserial.sys [61128 2012-03-22] (Cambridge Silicon Radio Limited) S3 csrusb; C:\Windows\System32\Drivers\csrusb.sys [47296 2012-03-22] (Cambridge Silicon Radio Limited) S3 csrusbfilter; C:\Windows\System32\Drivers\csrusbfilter.sys [23752 2012-03-22] (Cambridge Silicon Radio Limited) S3 csr_bthav; C:\Windows\System32\drivers\csrbthav.sys [99520 2012-03-22] (Cambridge Silicon Radio Limited) S3 DFX11_1; C:\Windows\System32\drivers\dfx11_1x64.sys [28008 2012-12-13] (Windows (R) Win 7 DDK provider) S3 GPUZ; No ImagePath S3 HipShieldK; C:\Windows\System32\drivers\HipShieldK.sys [197704 2013-09-23] (McAfee, Inc.) S3 ManyCam; C:\Windows\System32\DRIVERS\mcvidrv.sys [49264 2014-07-28] (Visicom Media Inc.) S3 mcaudrv_simple; C:\Windows\System32\drivers\mcaudrv_x64.sys [35440 2014-05-13] (Visicom Media Inc.) R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation) R3 mfeapfk; C:\Windows\System32\drivers\mfeapfk.sys [181584 2014-10-01] (McAfee, Inc.) R3 mfeavfk; C:\Windows\System32\drivers\mfeavfk.sys [313680 2014-10-01] (McAfee, Inc.) R3 mfefirek; C:\Windows\System32\drivers\mfefirek.sys [526360 2014-10-01] (McAfee, Inc.) R0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [786304 2014-10-01] (McAfee, Inc.) R3 mfencbdc; C:\Windows\System32\DRIVERS\mfencbdc.sys [447440 2014-09-19] (McAfee, Inc.) S3 mfencrk; C:\Windows\System32\DRIVERS\mfencrk.sys [96600 2014-09-19] (McAfee, Inc.) R0 mfewfpk; C:\Windows\System32\drivers\mfewfpk.sys [348560 2014-10-01] (McAfee, Inc.) S3 MHIKEY10; C:\Windows\System32\Drivers\MHIKEY10x64.sys [60288 2010-09-15] (Generic USB smartcard reader) R3 MQAC; C:\Windows\System32\drivers\mqac.sys [189440 2009-07-13] (Microsoft Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-03-27] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation) R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [2978520 2014-01-10] (Realtek Semiconductor Corporation ) R3 ScpVBus; C:\Windows\System32\DRIVERS\ScpVBus.sys [39168 2013-05-19] (Scarlet.Crush Productions) R5 tammgF119; C:\Windows\System32\Drivers\tammgF119.sys [37512 2015-05-16] () [File not signed] R5 tammgR119; C:\Windows\System32\Drivers\tammgR119.sys [37000 2015-05-16] () [File not signed] R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [31232 2009-09-16] (Tunngle.net) R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] () S1 scfd_1_10_0_16; system32\drivers\scfd_1_10_0_16.sys [X] R5 tammgF119; <===== ATTENTION Locked Service R5 tammgR119; <===== ATTENTION Locked Service S3 WinRing0_1_2_0; \??\C:\Users\Alec\AppData\Local\Temp\tmpDA40.tmp [X] ==================== NetSvcs (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.) ==================== One Month Created Files and Folders ======== (If an entry is included in the fixlist, the file\folder will be moved.) 2015-05-17 22:33 - 2015-05-17 22:33 - 00029742 _____ () C:\Users\Alec\Desktop\FRST.txt 2015-05-17 22:33 - 2015-05-17 22:29 - 02107392 _____ (Farbar) C:\Users\Alec\Desktop\FRST64.exe 2015-05-17 22:32 - 2015-05-17 22:33 - 00000000 ____D () C:\FRST 2015-05-17 22:32 - 2015-05-17 22:32 - 00029726 _____ () C:\Users\Alec\Downloads\FRST.txt 2015-05-17 22:32 - 2015-05-17 22:32 - 00000000 ____D () C:\Users\Alec\Downloads\AVG PC TuneUp 2015 15.0.1001.238 Final Incl. Crack & Key [ATOM] 2015-05-17 22:28 - 2015-05-17 22:29 - 02107392 _____ (Farbar) C:\Users\Alec\Downloads\FRST64.exe 2015-05-17 22:25 - 2015-05-17 22:28 - 00000000 ____D () C:\Users\Alec\AppData\Local\DesktopSearch 2015-05-17 22:25 - 2015-05-17 22:25 - 00058400 _____ () C:\Users\Alec\AppData\Local\GDIPFONTCACHEV1.DAT 2015-05-17 20:05 - 2015-05-17 20:05 - 00003446 _____ () C:\Windows\System32\Tasks\NetEngine 2015-05-17 20:05 - 2015-05-17 20:05 - 00000000 ____D () C:\ProgramData\NetEngine 2015-05-17 19:59 - 2015-05-17 22:26 - 00000000 ____D () C:\Program Files\BubbleSound 2015-05-17 17:43 - 2015-05-17 17:43 - 05116205 _____ () C:\Windows\shost.bin 2015-05-17 17:07 - 2015-05-17 17:07 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\jddsxwck 2015-05-17 16:39 - 2015-05-17 16:39 - 00002165 _____ () C:\Users\Public\Desktop\Style Builder 2015.lnk 2015-05-17 16:39 - 2015-05-17 16:39 - 00002079 _____ () C:\Users\Public\Desktop\LayOut 2015.lnk 2015-05-17 16:39 - 2015-05-17 16:39 - 00001994 _____ () C:\Users\Public\Desktop\SketchUp 2015.lnk 2015-05-17 16:39 - 2015-05-17 16:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SketchUp 2015 2015-05-17 16:38 - 2015-05-17 16:38 - 00000000 ____D () C:\Program Files\SketchUp 2015-05-17 16:37 - 2015-05-17 16:37 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\ygovifrb 2015-05-17 16:35 - 2015-05-17 16:35 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\fjyqlzdg 2015-05-17 15:16 - 2015-05-17 15:16 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\uwxznexb 2015-05-17 15:12 - 2015-05-17 16:01 - 00000000 ____D () C:\Users\Alec\Downloads\SketchUp Pro 2015 v15.2.687 (x86) & v15.2.685 (x64)-[FirstUploads] 2015-05-17 15:12 - 2015-05-17 15:12 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\hhwfqbyu 2015-05-17 15:11 - 2015-05-17 15:11 - 00268729 _____ () C:\Users\Alec\Downloads\[kat.cr]sketchup.pro.2015.v15.2.687.x86.v15.2.685.x64.firstuploads.torrent 2015-05-17 14:09 - 2015-05-17 14:09 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\livgvhqf 2015-05-17 10:28 - 2015-05-16 17:43 - 00037512 _____ () C:\Windows\system32\Drivers\tammgF119.sys 2015-05-17 10:28 - 2015-05-16 17:43 - 00037000 _____ () C:\Windows\system32\Drivers\tammgR119.sys 2015-05-17 10:27 - 2015-05-17 10:27 - 00268392 _____ () C:\Windows\system32\FNTCACHE.DAT 2015-05-17 10:27 - 2015-05-17 10:27 - 00000690 _____ () C:\Windows\PFRO.log 2015-05-17 10:04 - 2015-05-17 10:04 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\cpixyfuu 2015-05-17 10:03 - 2015-05-17 10:32 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable) 2015-05-17 10:03 - 2015-05-17 10:30 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-05-17 09:59 - 2015-05-17 12:53 - 00107736 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys 2015-05-17 09:59 - 2015-05-17 10:32 - 00000000 ____D () C:\Users\Alec\Desktop\mbar 2015-05-17 09:57 - 2015-05-17 09:59 - 16502728 _____ (Malwarebytes Corp.) C:\Users\Alec\Downloads\mbar-1.09.1.1004.exe 2015-05-17 09:38 - 2015-05-17 09:43 - 12728192 _____ () C:\Users\Alec\Downloads\#S.C.U.15.64#.rar 2015-05-17 01:00 - 2015-05-17 10:29 - 00003415 _____ () C:\Windows\runSW.log 2015-05-17 01:00 - 2015-05-17 10:28 - 00000168 _____ () C:\Windows\setupact.log 2015-05-17 01:00 - 2015-05-17 01:00 - 00000000 _____ () C:\Windows\setuperr.log 2015-05-16 21:49 - 2015-05-16 21:49 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\zzoisgxg 2015-05-16 21:41 - 2015-05-17 09:34 - 00000000 ____D () C:\ProgramData\ASGVIS 2015-05-16 21:40 - 2015-05-16 21:40 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\SketchUp 2015-05-16 21:36 - 2015-05-16 21:36 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\vtpgyygt 2015-05-16 20:09 - 2015-05-16 20:09 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\ltbedhlm 2015-05-16 20:06 - 2015-05-16 20:06 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\petstcug 2015-05-16 20:06 - 2015-05-16 20:06 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\esrtlplj 2015-05-16 19:55 - 2015-05-16 20:14 - 00000000 ____D () C:\AdwCleaner 2015-05-16 19:54 - 2015-05-16 19:54 - 02209792 _____ () C:\Users\Alec\Downloads\adwcleaner_4.204.exe 2015-05-16 19:50 - 2015-05-16 19:50 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\vxsfcnla 2015-05-16 19:48 - 2015-05-16 19:48 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\wirpaume 2015-05-16 18:42 - 2015-05-16 18:42 - 00000000 ____D () C:\ProgramData\Reprise 2015-05-16 18:41 - 2015-05-16 18:41 - 00000000 ____D () C:\ProgramData\SketchUp 2015-05-16 18:40 - 2015-05-16 18:40 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\ommqsksp 2015-05-16 18:38 - 2015-05-16 18:38 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\xrmctdcb 2015-05-16 18:29 - 2015-05-16 18:38 - 114281544 _____ (Trimble Navigation Limited) C:\Users\Alec\Downloads\SketchUpPro-en-x64.exe 2015-05-16 18:10 - 2015-05-16 18:10 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\udneujhi 2015-05-16 17:53 - 2015-05-17 19:56 - 00000000 ____D () C:\Users\Alec\AppData\Local\ospd_us_1069 2015-05-16 17:53 - 2015-05-16 18:04 - 00000000 ____D () C:\Users\Alec\AppData\Local\57FD78B7-4A4B-5A45-90A8-F886376DE47C 2015-05-16 17:53 - 2015-05-16 17:53 - 00004180 _____ () C:\Windows\System32\Tasks\SuperClick Auto Updater 1.10.0.16 Pending Update 2015-05-16 17:53 - 2015-05-16 17:53 - 00004168 _____ () C:\Windows\System32\Tasks\SuperClick Auto Updater 1.10.0.16 Core 2015-05-16 17:49 - 2015-05-17 17:49 - 00000346 _____ () C:\Windows\Tasks\Bidaily Synchronize Task[pr].job 2015-05-16 17:49 - 2015-05-16 17:49 - 00003256 _____ () C:\Windows\System32\Tasks\Bidaily Synchronize Task[pr] 2015-05-16 17:43 - 2015-05-17 10:28 - 00004768 _____ () C:\Windows\SysWOW64\Neltyjcoa.ini 2015-05-16 17:43 - 2015-05-17 10:28 - 00002672 _____ () C:\Windows\SysWOW64\NeltyjcoaOff.ini 2015-05-16 17:43 - 2015-05-17 10:28 - 00002672 _____ () C:\Windows\system32\NeltyjcoaOff.ini 2015-05-16 17:43 - 2015-05-16 17:43 - 00000000 ____D () C:\ProgramData\boostwebapp 2015-05-16 17:43 - 2015-05-16 15:19 - 00360448 _____ () C:\Windows\system32\Neltyjcoa64.dll 2015-05-16 17:43 - 2015-05-16 15:18 - 00286720 _____ () C:\Windows\SysWOW64\Neltyjcoa.dll 2015-05-16 17:42 - 2015-05-16 20:58 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\21E504E0-1431816148-11DD-B696-382C4ABA7555.SH! 2015-05-16 17:28 - 2015-05-16 17:44 - 00000000 ____D () C:\Users\Alec\Downloads\Vray 2.00.24261 for Sketchup 2014 2015-05-16 17:27 - 2015-05-16 17:27 - 00018556 _____ () C:\Users\Alec\Downloads\[kat.cr]vray.2.00.24261.for.sketchup.2014.torrent 2015-05-16 17:27 - 2015-05-16 17:27 - 00006092 _____ () C:\Users\Alec\Downloads\[kat.cr]google.sketchup.pro.2014.v14.0.4900.2.click.run.registered.torrent 2015-05-15 17:09 - 2015-05-15 23:50 - 00000000 ____D () C:\Users\Alec\Downloads\Grand Theft Auto V by xatab 2015-05-15 17:08 - 2015-05-15 17:08 - 00150478 _____ () C:\Users\Alec\Downloads\[kat.cr]grand.theft.auto.v.repack.xatab.torrent 2015-05-15 17:04 - 2015-05-15 17:04 - 00000000 ____D () C:\Windows\pss 2015-05-15 16:59 - 2015-05-15 17:00 - 00000000 ____D () C:\Users\Alec\Downloads\UTORRENT 2015-05-15 16:55 - 2015-05-17 10:03 - 00000000 ____D () C:\ProgramData\Malwarebytes 2015-05-15 03:02 - 2015-05-01 08:17 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-15 03:02 - 2015-05-01 08:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll 2015-05-14 19:59 - 2015-05-14 19:59 - 00000000 ____D () C:\Users\Alec\AppData\Local\TeknoGods 2015-05-14 15:33 - 2015-05-04 20:29 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2015-05-14 15:33 - 2015-05-04 20:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2015-05-14 15:33 - 2015-04-21 21:28 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-05-14 15:33 - 2015-04-21 20:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-05-14 15:33 - 2015-04-21 12:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-05-14 15:33 - 2015-04-21 12:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-05-14 15:33 - 2015-04-21 12:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-05-14 15:33 - 2015-04-21 11:51 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-05-14 15:33 - 2015-04-21 11:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-05-14 15:33 - 2015-04-21 11:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-05-14 15:33 - 2015-04-21 11:50 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-05-14 15:33 - 2015-04-21 11:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-05-14 15:33 - 2015-04-21 11:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-05-14 15:33 - 2015-04-21 11:41 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-05-14 15:33 - 2015-04-21 11:40 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-05-14 15:33 - 2015-04-21 11:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-05-14 15:33 - 2015-04-21 11:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-05-14 15:33 - 2015-04-21 11:35 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-05-14 15:33 - 2015-04-21 11:35 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-05-14 15:33 - 2015-04-21 11:34 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-05-14 15:33 - 2015-04-21 11:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-05-14 15:33 - 2015-04-21 11:26 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-05-14 15:33 - 2015-04-21 11:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-05-14 15:33 - 2015-04-21 11:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-05-14 15:33 - 2015-04-21 11:22 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-05-14 15:33 - 2015-04-21 11:14 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-05-14 15:33 - 2015-04-21 11:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-05-14 15:33 - 2015-04-21 11:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-05-14 15:33 - 2015-04-21 11:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-05-14 15:33 - 2015-04-21 11:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-05-14 15:33 - 2015-04-21 11:09 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-05-14 15:33 - 2015-04-21 11:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-05-14 15:33 - 2015-04-21 11:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-05-14 15:33 - 2015-04-21 11:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-05-14 15:33 - 2015-04-21 11:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-05-14 15:33 - 2015-04-21 11:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-05-14 15:33 - 2015-04-21 11:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-05-14 15:33 - 2015-04-21 11:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-05-14 15:33 - 2015-04-21 10:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-05-14 15:33 - 2015-04-21 10:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-05-14 15:33 - 2015-04-21 10:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-05-14 15:33 - 2015-04-21 10:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-05-14 15:33 - 2015-04-21 10:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-05-14 15:33 - 2015-04-21 10:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-05-14 15:33 - 2015-04-21 10:47 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-05-14 15:33 - 2015-04-21 10:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-05-14 15:33 - 2015-04-21 10:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-05-14 15:33 - 2015-04-21 10:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-05-14 15:33 - 2015-04-21 10:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-05-14 15:33 - 2015-04-21 10:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-05-14 15:33 - 2015-04-21 10:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-05-14 15:33 - 2015-04-21 10:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-05-14 15:33 - 2015-04-21 10:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-05-14 15:33 - 2015-04-21 10:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-05-14 15:33 - 2015-04-21 10:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-05-14 15:33 - 2015-04-21 10:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-05-14 15:33 - 2015-04-21 10:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-05-14 15:33 - 2015-04-21 10:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-05-14 15:33 - 2015-04-21 10:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-05-14 15:33 - 2015-04-21 10:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-05-14 15:33 - 2015-04-21 09:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-05-14 15:33 - 2015-04-21 09:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-05-14 15:33 - 2015-04-17 22:10 - 00460800 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll 2015-05-14 15:33 - 2015-04-17 21:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll 2015-05-14 15:32 - 2015-04-27 14:28 - 05569984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2015-05-14 15:32 - 2015-04-27 14:28 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2015-05-14 15:32 - 2015-04-27 14:28 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2015-05-14 15:32 - 2015-04-27 14:26 - 01728960 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 01254400 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00879104 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00314880 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00113664 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-05-14 15:32 - 2015-04-27 14:23 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-05-14 15:32 - 2015-04-27 14:22 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00104448 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2015-05-14 15:32 - 2015-04-27 14:22 - 00019456 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe 2015-05-14 15:32 - 2015-04-27 14:21 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2015-05-14 15:32 - 2015-04-27 14:18 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2015-05-14 15:32 - 2015-04-27 14:18 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:16 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 14:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2015-05-14 15:32 - 2015-04-27 14:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2015-05-14 15:32 - 2015-04-27 14:08 - 01310744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tdh.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sechost.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2015-05-14 15:32 - 2015-04-27 14:05 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-05-14 15:32 - 2015-04-27 14:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2015-05-14 15:32 - 2015-04-27 14:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2015-05-14 15:32 - 2015-04-27 14:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tracerpt.exe 2015-05-14 15:32 - 2015-04-27 14:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\logman.exe 2015-05-14 15:32 - 2015-04-27 14:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\typeperf.exe 2015-05-14 15:32 - 2015-04-27 14:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\relog.exe 2015-05-14 15:32 - 2015-04-27 14:04 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-05-14 15:32 - 2015-04-27 14:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2015-05-14 15:32 - 2015-04-27 14:03 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-05-14 15:32 - 2015-04-27 14:03 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-05-14 15:32 - 2015-04-27 14:03 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2015-05-14 15:32 - 2015-04-27 14:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2015-05-14 15:32 - 2015-04-27 14:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\diskperf.exe 2015-05-14 15:32 - 2015-04-27 14:03 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-05-14 15:32 - 2015-04-27 14:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2015-05-14 15:32 - 2015-04-27 14:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 13:06 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll 2015-05-14 15:32 - 2015-04-27 12:57 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-05-14 15:32 - 2015-04-27 12:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-05-14 15:32 - 2015-04-27 12:55 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 12:55 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 12:55 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-05-14 15:32 - 2015-04-27 12:55 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-05-14 15:32 - 2015-04-19 22:17 - 01647104 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll 2015-05-14 15:32 - 2015-04-19 22:17 - 01179136 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll 2015-05-14 15:32 - 2015-04-19 21:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll 2015-05-14 15:32 - 2015-04-19 21:11 - 03204608 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-05-14 15:32 - 2015-04-12 22:28 - 00328704 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2015-05-14 15:32 - 2015-04-07 22:29 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2015-05-14 15:32 - 2015-04-07 22:29 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2015-05-14 15:32 - 2015-04-07 22:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2015-05-14 15:32 - 2015-03-03 23:41 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll 2015-05-14 15:32 - 2015-03-03 23:41 - 00072192 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll 2015-05-14 15:32 - 2015-03-03 23:41 - 00023552 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe 2015-05-14 15:32 - 2015-03-03 23:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll 2015-05-14 15:32 - 2015-03-03 23:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shimeng.dll 2015-05-14 15:32 - 2015-03-03 23:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apphelp.dll 2015-05-14 15:32 - 2015-03-03 23:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe 2015-05-14 15:32 - 2015-02-18 02:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\poqexec.exe 2015-05-14 15:32 - 2015-02-18 02:04 - 00142336 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe 2015-05-14 15:32 - 2015-01-28 22:19 - 02543104 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll 2015-05-14 15:32 - 2015-01-28 22:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll 2015-05-10 08:44 - 2015-05-10 08:44 - 00002330 _____ () C:\Users\Alec\Desktop\Play COD MW3 nosTEAM.lnk 2015-05-09 22:27 - 2015-05-09 22:27 - 00000000 ____D () C:\Windows\System32\Tasks\PCMeter 2015-05-09 17:22 - 2015-05-09 17:22 - 00002217 _____ () C:\Users\Public\Desktop\Call of Duty - Black Ops Call MP.lnk 2015-05-09 17:22 - 2015-05-09 17:22 - 00002203 _____ () C:\Users\Public\Desktop\Call of Duty - Black Ops.lnk 2015-05-09 17:22 - 2015-05-09 17:22 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision 2015-05-09 14:05 - 2007-11-01 17:23 - 00499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll 2015-05-09 14:05 - 2007-11-01 17:23 - 00348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll 2015-05-09 13:56 - 2015-05-09 13:56 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\WinRAR 2015-05-09 13:55 - 2015-05-09 13:55 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-05-09 13:55 - 2015-05-09 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2015-05-09 13:55 - 2015-05-09 13:55 - 00000000 ____D () C:\Program Files\WinRAR 2015-05-03 22:25 - 2015-05-03 22:25 - 00001059 _____ () C:\Users\Alec\Desktop\Left 4 Dead 2.lnk 2015-05-03 22:11 - 2015-05-05 19:34 - 00000000 ____D () C:\Program Files (x86)\Left 4 Dead 2 2015-05-03 21:53 - 2015-02-25 03:24 - 00044856 _____ (AVG Technologies) C:\Windows\system32\uxtuneup.dll 2015-05-03 21:53 - 2015-02-25 03:24 - 00036664 _____ (AVG Technologies) C:\Windows\SysWOW64\uxtuneup.dll 2015-05-03 21:41 - 2015-05-03 21:41 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\AVG 2015-05-03 21:41 - 2015-02-25 03:25 - 00041784 _____ (AVG Technologies) C:\Windows\system32\TURegOpt.exe 2015-05-03 21:41 - 2015-02-25 03:24 - 00030520 _____ (AVG Technologies) C:\Windows\system32\authuitu.dll 2015-05-03 21:41 - 2015-02-25 03:24 - 00025912 _____ (AVG Technologies) C:\Windows\SysWOW64\authuitu.dll 2015-05-03 21:39 - 2015-05-03 21:39 - 00000000 ____D () C:\Users\Alec\AppData\Local\Avg 2015-05-03 21:38 - 2015-05-03 21:41 - 00000000 ____D () C:\ProgramData\AVG 2015-05-03 11:22 - 2015-05-03 12:33 - 00000000 ____D () C:\Users\Alec\AppData\Local\PAYDAY 2 2015-05-03 09:41 - 2014-12-29 15:56 - 00000226 _____ () C:\Program Files (x86)\update-PayDay2.bat 2015-05-03 09:41 - 2013-11-06 13:28 - 00000732 _____ () C:\Program Files (x86)\visit-www.nosteam.ro.html 2015-05-03 09:34 - 2015-05-03 09:34 - 00000000 ____D () C:\Program Files (x86)\New folder 2015-05-03 09:33 - 2015-05-03 12:22 - 00000000 ____D () C:\Program Files (x86)\PAYDAY 2 2015-05-03 09:33 - 2015-05-03 09:41 - 00001902 _____ () C:\Users\Alec\Desktop\Play PAYDAY 2.lnk 2015-05-02 14:35 - 2015-04-08 15:32 - 00560968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-05-02 14:34 - 2015-04-08 19:58 - 01895568 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435012.dll 2015-05-02 14:34 - 2015-04-08 19:58 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435012.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 31570064 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 30397072 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 25375048 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 24053576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 15818528 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 15716232 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 14006752 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 12852784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 11380728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 10423952 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-05-02 14:33 - 2015-04-08 19:58 - 02896528 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 02573456 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 01086424 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 01047368 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 01037640 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00970568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00962192 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00927440 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00499344 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00402576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00390472 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00346256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-05-02 14:33 - 2015-04-08 19:58 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-04-25 20:17 - 2015-04-25 20:17 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ZombieModding 2015-04-25 20:17 - 2015-04-25 20:17 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZombieModding 2015-04-25 17:06 - 2015-04-25 20:29 - 00000000 ____D () C:\ProgramData\Tunngle 2015-04-25 17:06 - 2015-04-25 17:06 - 00000998 _____ () C:\Users\Public\Desktop\Tunngle.lnk 2015-04-25 17:06 - 2015-04-25 17:06 - 00000000 ____D () C:\Users\Public\Documents\Tunngle 2015-04-25 17:06 - 2015-04-25 17:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tunngle 2015-04-25 17:06 - 2015-04-25 17:06 - 00000000 ____D () C:\Program Files (x86)\Tunngle 2015-04-25 16:11 - 2015-04-25 16:11 - 00003374 _____ () C:\Windows\System32\Tasks\SidebarExecute 2015-04-25 16:08 - 2015-04-25 16:08 - 00000000 ____D () C:\Users\Alec\Documents\Tunngle 2015-04-19 10:49 - 2015-04-19 10:49 - 00000000 ____D () C:\Users\Alec\.swt 2015-04-19 10:48 - 2015-05-09 11:25 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Azureus 2015-04-18 17:54 - 2015-04-25 17:32 - 00000000 ____D () C:\Program Files\Rockstar Games 2015-04-17 21:28 - 2015-04-17 21:28 - 00000000 ____D () C:\ProgramData\Virtual RC Pro 2015-04-17 20:01 - 2015-04-17 20:01 - 00002972 _____ () C:\Windows\System32\Tasks\{5541BBC3-0B1D-49C4-A5C3-C6E581C49BC6} 2015-04-17 20:01 - 2015-04-17 20:01 - 00002972 _____ () C:\Windows\System32\Tasks\{14E0950E-30FF-4E5E-8EF0-EA140BCEDA69} 2015-04-17 19:04 - 2015-04-17 19:37 - 00000000 ____D () C:\Users\Alec\AppData\Local\Arma 3 2015-04-17 19:04 - 2015-04-17 19:04 - 00000000 ____D () C:\Users\Alec\Documents\Arma 3 2015-04-17 19:04 - 2015-04-17 19:04 - 00000000 ____D () C:\ProgramData\Bohemia Interactive 2015-04-17 19:03 - 2015-04-17 19:03 - 00001172 _____ () C:\Users\Alec\Desktop\ARMA III.lnk 2015-04-17 19:03 - 2015-04-17 19:03 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\ARMA III 2015-04-17 19:03 - 2015-04-17 19:03 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics 2015-04-17 18:49 - 2015-04-17 18:49 - 00000000 ____D () C:\Program Files (x86)\R.G. Mechanics 2015-04-17 15:26 - 2015-04-18 10:32 - 00000000 ____D () C:\Users\Alec\AppData\Local\Unity 2015-04-17 15:22 - 2015-04-17 15:22 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Construct2 2015-04-17 15:04 - 2015-04-17 15:04 - 00001156 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\GameSalad Creator.lnk 2015-04-17 15:04 - 2015-04-17 15:04 - 00000000 __SHD () C:\Windows\SysWOW64\AI_RecycleBin 2015-04-17 15:04 - 2015-04-17 15:04 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\GameSalad 2015-04-17 15:04 - 2015-04-17 15:04 - 00000000 ____D () C:\Users\Alec\AppData\Local\GameSalad 2015-04-17 15:04 - 2015-04-17 15:04 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\GameSalad 2015-04-17 15:04 - 2015-04-17 15:04 - 00000000 ____D () C:\Program Files (x86)\GameSalad 2015-04-17 14:09 - 2008-07-12 08:18 - 04992520 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_39.dll 2015-04-17 14:09 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll 2015-04-17 14:09 - 2008-07-12 08:18 - 01942552 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_39.dll 2015-04-17 14:09 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll 2015-04-17 14:09 - 2008-07-12 08:18 - 00540688 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_39.dll 2015-04-17 14:09 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll 2015-04-17 14:08 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_25.dll ==================== One Month Modified Files and Folders ======= (If an entry is included in the fixlist, the file\folder will be moved.) 2015-05-17 22:33 - 2014-12-28 22:57 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\uTorrent 2015-05-17 22:30 - 2014-12-28 23:52 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-05-17 22:28 - 2015-01-25 21:43 - 01678462 _____ () C:\Windows\WindowsUpdate.log 2015-05-17 22:07 - 2014-12-25 17:14 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2015-05-17 10:36 - 2009-07-13 23:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-05-17 10:36 - 2009-07-13 23:45 - 00021904 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-05-17 10:34 - 2009-07-14 00:13 - 00910468 _____ () C:\Windows\system32\PerfStringBackup.INI 2015-05-17 10:30 - 2014-12-25 17:14 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2015-05-17 10:27 - 2014-12-18 11:38 - 00000000 ____D () C:\ProgramData\NVIDIA 2015-05-17 10:27 - 2009-07-14 00:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT 2015-05-16 20:12 - 2015-01-14 19:49 - 00000000 ____D () C:\Windows\Minidump 2015-05-16 20:12 - 2014-12-30 14:24 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Notepad++ 2015-05-16 20:11 - 2014-12-30 15:43 - 00000000 ____D () C:\Users\DefaultAppPool 2015-05-16 19:57 - 2014-12-18 11:39 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-05-16 19:57 - 2014-12-18 11:37 - 00000000 ____D () C:\Program Files (x86)\NVIDIA Corporation 2015-05-16 19:50 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\NDF 2015-05-16 14:29 - 2014-12-29 11:52 - 00001982 _____ () C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk 2015-05-16 14:29 - 2014-12-28 22:46 - 00000873 _____ () C:\Users\Public\Desktop\CCleaner.lnk 2015-05-15 17:02 - 2015-03-10 20:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InputMapper 2015-05-15 16:53 - 2015-03-10 18:52 - 00000000 ____D () C:\Users\Alec\Documents\Mods 2015-05-15 04:08 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\rescache 2015-05-15 03:31 - 2014-12-28 22:50 - 00000000 ____D () C:\Program Files\Microsoft Silverlight 2015-05-15 03:31 - 2014-12-28 22:50 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight 2015-05-15 03:29 - 2010-11-21 02:17 - 00000000 ____D () C:\Program Files\Windows Journal 2015-05-15 03:29 - 2009-07-13 22:20 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers 2015-05-15 03:11 - 2015-03-10 18:44 - 00000000 ____D () C:\Program Files (x86)\Microsoft Application Virtualization Client 2015-05-15 03:11 - 2014-12-18 11:45 - 00928926 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI 2015-05-15 03:09 - 2014-12-29 13:25 - 00000000 ____D () C:\Windows\system32\MRT 2015-05-15 03:02 - 2014-12-29 13:25 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-05-15 03:02 - 2014-12-28 22:50 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 2015-05-15 03:02 - 2014-12-25 17:14 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2015-05-15 03:01 - 2014-12-25 17:14 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2015-05-14 20:25 - 2014-12-25 17:15 - 00002190 _____ () C:\Users\Public\Desktop\Google Chrome.lnk 2015-05-10 08:44 - 2014-12-30 15:07 - 00000000 ____D () C:\Program Files (x86)\Activision 2015-05-09 14:41 - 2015-03-14 14:22 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\SoftGrid Client 2015-05-09 14:08 - 2014-12-29 13:01 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Adobe 2015-05-09 14:05 - 2014-12-18 11:43 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information 2015-05-09 14:03 - 2014-12-28 23:50 - 00000000 ____D () C:\Users\Alec\AppData\Local\Adobe 2015-05-09 11:40 - 2015-03-29 18:59 - 00000000 ____D () C:\Users\Alec\AppData\Local\Cloud Penguin 2015-05-09 11:24 - 2014-12-28 22:46 - 00000000 ____D () C:\Program Files\CCleaner 2015-05-09 11:18 - 2014-12-25 18:21 - 00000000 ____D () C:\Program Files (x86)\McAfee 2015-05-03 22:25 - 2014-12-30 15:15 - 00000000 ____D () C:\Windows\SysWOW64\directx 2015-05-03 22:25 - 2011-11-07 15:32 - 00000000 ___HD () C:\Windows\msdownld.tmp 2015-05-02 14:34 - 2014-12-18 11:37 - 00000000 ____D () C:\Program Files\NVIDIA Corporation 2015-04-25 20:29 - 2014-12-28 23:37 - 00000000 ____D () C:\Users\Alec\AppData\Roaming\Tunngle 2015-04-25 17:32 - 2015-01-31 19:03 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games 2015-04-25 17:29 - 2014-12-18 11:37 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation 2015-04-25 17:28 - 2014-12-25 23:23 - 00001384 _____ () C:\Users\Public\Desktop\GeForce Experience.lnk 2015-04-19 10:49 - 2014-12-25 16:50 - 00000000 ____D () C:\Users\Alec ==================== Files in the root of some directories ======= 2015-05-03 09:41 - 2014-12-29 15:56 - 0000226 _____ () C:\Program Files (x86)\update-PayDay2.bat 2015-05-03 09:41 - 2013-11-06 13:28 - 0000732 _____ () C:\Program Files (x86)\visit-www.nosteam.ro.html 2014-12-18 11:45 - 2014-12-18 11:45 - 0000000 ____H () C:\ProgramData\DP45977C.lfl ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2015-05-15 04:01 ==================== End Of Log ============================